Drive-by downloads¶
A drive-by download attack refers to the unintentional download of malicious code to your device that leaves you open to an attack. This can happen while browsing a legitimate website or through a malicious advertisement displayed on an otherwise safe site.
This type of attack comes in authorised and unauthorised flavours. With the latter, for the device to become infected it is not necessary to click on anything, to download, or to open a malicious email attachment. It just happens magically.
Drive-by downloads can install non-malicious potentially unwanted programs or applications (PUPs/PUAs in mobiles, which are clean, but may actually be madware at its worst) or malware-loaded attacks with intention to hijack a device, install spyware, or ruin data or disable the device (a targeted personal attack).
Authorised downloads¶
- Adversary creates an online message, ad, or a legitimate program download.
- You click the link, download the software, etc.
- You do not opt out of extra software, or are sent to a malware-infested site.
- Adversary and malware take control of your data.
Unauthorised downloads¶
- Adversary compromises a legitimate web page using a security flaw in website and adds a malicious component.
- You visit the page, and it finds your device’s security flaw.
- The flaw is exploited and malware is downloaded to your device.
- The adversary has control over your device.